Merge remote-tracking branch 'refs/remotes/origin/main'

This commit is contained in:
muon 2024-11-29 16:33:35 +00:00
commit 51fc35cc23
4 changed files with 96 additions and 17 deletions

View file

@ -1,12 +1,9 @@
{ config, lib, pkgs, inputs, system, ... }:
let
cfg = config.mods;
let cfg = config.mods;
in {
# Hardware
imports = [
./hardware-configuration.nix
];
imports = [ ./hardware-configuration.nix ];
# System
mods.user.name = "muon";
@ -30,20 +27,24 @@ in {
mods.server.sync.address = "100.85.27.29";
mods.server.sync.port = "8385";
mods.server.media.enable = true;
mods.server.photoprism.enable = true;
mods.server.media.enable = false;
mods.server.photoprism.enable = false;
mods.server.wireguard.enable = true;
mods.server.headscale.enable = false;
mods.server.nginx.enable = true;
# Use the GRUB 2 boot loader.
boot.loader.grub.enable = true;
boot.loader.grub.device = "/dev/vda";
boot.initrd.checkJournalingFS = false;
users.users.muon = {
openssh.authorizedKeys.keys =
[''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKEio+Y5wBVD1wILaH2R3wV10FvVjiqy/4gGBWHOITTB muon@muon'' ''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKevYmkH7xvYoquBjnYZ7PJiVqf+GOh9fxAJBN6wZGBB gin4@hi.is'' ];
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKEio+Y5wBVD1wILaH2R3wV10FvVjiqy/4gGBWHOITTB muon@muon"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKevYmkH7xvYoquBjnYZ7PJiVqf+GOh9fxAJBN6wZGBB gin4@hi.is"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILmAOd9VbhyJeibt6Vrb101MNTk5W8+rh94Djv/C+pyu muon@muho"
];
};
# services.static-web-server = {
@ -59,8 +60,10 @@ in {
# Enable the OpenSSH daemon.
services.openssh.enable = true;
users.users.root.openssh.authorizedKeys.keys =
[''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKEio+Y5wBVD1wILaH2R3wV10FvVjiqy/4gGBWHOITTB muon@muon'' ''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKevYmkH7xvYoquBjnYZ7PJiVqf+GOh9fxAJBN6wZGBB gin4@hi.is'' ];
users.users.root.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKEio+Y5wBVD1wILaH2R3wV10FvVjiqy/4gGBWHOITTB muon@muon"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKevYmkH7xvYoquBjnYZ7PJiVqf+GOh9fxAJBN6wZGBB gin4@hi.is"
];
networking.firewall = {
enable = true;